The Popup Builder WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup content in a maintenance routine that… (CVE-2026-112230)
Description
The Popup Builder WordPress plugin versions before 4.4.6 contain a vulnerability where authorization checks are not performed before trashing popup content during a maintenance routine triggered by unauthenticated requests. This flaw allows unauthenticated attackers to move popups into the Trash and overwrite their preview data.
CVSS v3.1
Score 3.7low
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-112230 affects the Popup Builder WordPress plugin before version 4.4.6. The vulnerability arises because the plugin does not verify user authorization before executing a maintenance routine that trashes popup content. This routine can be triggered by unauthenticated requests, enabling attackers without any privileges to move popups into the Trash and overwrite their preview data. The CVSS 3.1 base score is 3.7, indicating a low severity issue with network attack vector, high attack complexity, no privileges required, no user interaction, and limited impact on integrity only.
Potential Impact
An unauthenticated attacker can cause popup content to be trashed and their preview data overwritten. This impacts the integrity of the popup content but does not affect confidentiality or availability. There is no indication of exploitation in the wild.
Mitigation Recommendations
Upgrade the Popup Builder WordPress plugin to version 4.4.6 or later, where this authorization check issue is fixed. Since no patch links were provided, verify the availability of the fix from the official plugin source or vendor advisory. Until patched, restrict access to the maintenance routine if possible.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-7923-x8xg-r65v
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-112230"]
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6adbaadcd73cc49347b20759
Added to database: 10/23/2026, 18:43:40 UTC
Last enriched: 10/23/2026, 19:07:52 UTC
Last updated: 10/23/2026, 19:25:09 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.